Secure code review of a sample banking application,10 vulnerabilities identified (SQLi, broken access control, XSS, CSRF) via manual review + Bandit, remediated and verified with a re-scan. - amant...

Form validation security testing - XSS injection, SQL injection, boundary lengths, special characters. Found real vulnerability: checkout accepts malicious payloads. Playwright + TypeScript. - Djon...

Damn Small XSS Scanner. Contribute to stamparm/DSXS development by creating an account on GitHub.

A comprehensive collection of web security vulnerability notes covering concepts, attack techniques, real-world examples, exploitation methodologies, and mitigation strategies for security research...

Local root exploit for CVE-2025-21479 (Adreno KGSL) on iQOO Neo8 (SM8475) - physical memory r/w, disables SELinux, spawns root shell - Qingizi7/cve-2025-21479_iqooneo8

Get the exchange rates for currencies. Contribute to suchlab/currenzy development by creating an account on GitHub.

PCAP investigations using Zeek and Suricata to analyze DarkGate malware delivery and Sliver C2 activity, with Linux log parsing, file extraction, hashing, and OSINT enrichment. - ronaplayda4/zeek-s...

PoC exploit chain for CVE-2026-2796: SpiderMonkey WebAssembly sandbox escape (signature type confusion -> arbitrary R/W -> RCE) - SneakyNachos/CVE-2026-2796-escape-wasm-by-using-wasm

https://github.com/TheWover/donut in pure C#（.NET 10）. supports compression, AMSI/WLDP/ETW bypass, etc. - Ptkatz/SharpDonut

GhostC2: Un framework de Comando y Control (C2) sigiloso que utiliza protocolos no convencionales para comunicación encubierta. - santiagoalza2132-art/GhostC2

Contribute to BayajidAlam/jenkins-poc development by creating an account on GitHub.

● Automated malware analysis and detection rule generation pipeline using Wazuh SIEM, YARA, and Sigma rules - Howard1x5/detection-as-code

Contribute to anands-bounteous/jira-confluence-mcp development by creating an account on GitHub.

Contribute to mekrina/fastjson-1.2.83-rce-research development by creating an account on GitHub.

渗透测试报告、CVE 漏洞复现文档. Contribute to Hz-zH299/cve-reproduce-reports development by creating an account on GitHub.

使用docker对漏洞环境进行复现. Contribute to YYX1000/vullab development by creating an account on GitHub.

A comprehensive Bug Bounty and Web Application Security Toolkit covering reconnaissance, subdomain enumeration, port scanning, technology detection, content discovery, fuzzing, API testing, and vul...

Lightweight Python network vulnerability scanner and reporter - abraham0018/sentryscan

Official Burp extension for integrating with HuntBox - HuntBox/huntbox-burp

Burp Suite extension (Jython) that decompresses zlib-encoded HTTP request and response bodies inline, adding a Zlib Decoded tab to the message editor. - ahrixia/burp-zlib-decoder

A Python vulnerability scanner that tests for SQL injection and XSS on a target web app, then uses AI to review each finding before it's reported. Includes a recon step to confirm testable ...